Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer (raw, json)
Hash identifier: 9fWsqHLy5NiZUb+PdQgKS8gz5FQzfNy89xwqbtFb8Cw=
Subject key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01924992A6E21EDC659B26399E5C36669BA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Oct 2024 19:33:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43605
IP: 193.46.77.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:49:92:a6:e2:1e:dc:65:9b:26:39:9e:5c:36:66:9b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 1 19:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b81525ae1a5afcef193f5a40177bf27388831078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:45:f3:7f:6b:d8:57:2b:e7:ba:24:bf:ee:
33:8d:02:a1:13:59:50:eb:52:46:19:23:1e:25:d5:
61:27:a0:3d:77:7c:b3:81:e7:c1:65:39:09:91:b5:
90:eb:3d:79:be:7c:20:16:b6:95:9c:11:79:40:13:
21:4c:fc:3d:f8:73:ac:68:1e:d0:91:74:7f:03:ab:
f3:29:54:76:b2:a1:46:78:a0:5e:b6:33:4e:0d:c8:
57:84:fd:00:e9:46:bb:4b:9b:8d:dd:eb:d2:3b:69:
9c:4a:3b:6c:3e:dc:e4:7f:14:6a:a7:27:7e:31:d3:
d3:a9:cc:81:24:48:e4:65:6f:81:79:59:6d:56:ad:
09:b6:35:30:eb:9e:10:af:5d:84:45:19:43:24:73:
4d:c9:d3:a9:96:31:c4:c3:bb:aa:73:22:47:34:b6:
9b:f6:59:6d:0d:61:20:3c:40:99:da:36:75:9a:a5:
28:6b:f4:31:81:58:b1:48:87:9b:63:7c:52:7b:8e:
38:4f:fb:c4:c1:c5:78:cd:e8:b8:eb:f4:90:da:94:
35:9d:bc:4a:02:a2:e0:29:b6:01:ab:64:47:d2:7b:
25:0a:af:b1:c4:37:3f:9a:1a:95:b3:f1:0c:bf:e9:
74:98:c1:ea:c6:68:c6:8c:0a:71:5c:e8:9e:73:d2:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.77.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43605
Signature Algorithm: sha256WithRSAEncryption
4e:72:d2:f8:75:f5:37:e1:55:87:b7:48:58:d3:7b:ae:da:59:
7a:1d:e8:62:c1:fb:76:37:a2:ae:84:bf:b1:7e:b2:8e:9f:89:
a2:02:e4:6e:0d:3b:38:f9:ed:db:0b:61:a2:a9:fd:13:bd:23:
9b:0c:b0:ab:de:52:11:2d:bd:0a:b5:d9:a1:76:4d:f8:1c:bb:
71:38:75:a5:25:dd:3d:cb:6d:cc:26:8b:c7:54:d5:6f:66:8d:
0f:91:12:b4:c5:8a:f2:49:6a:b2:0b:fd:f2:a5:26:60:12:b2:
9a:d3:bc:b3:70:e6:9c:61:60:ec:46:53:17:2a:24:40:40:1f:
c3:9c:a6:fd:67:c9:c6:37:b2:19:a2:31:01:19:71:15:0f:76:
62:42:36:37:5b:78:e4:dd:09:32:2c:2a:21:58:32:62:08:e7:
68:72:ff:81:25:55:4f:83:c8:5c:32:07:66:6e:b8:da:fc:6a:
34:d1:fa:f1:34:ef:90:0b:b5:f9:dc:b5:e9:3b:c0:91:4b:b7:
e0:84:87:e8:c4:0f:ec:a3:27:b2:1b:aa:27:2a:c0:4b:70:c5:
fb:64:52:fc:03:f3:6a:6d:70:b5:3c:93:94:d1:e5:39:a7:60:
d7:e1:5c:52:da:6d:46:00:f5:f0:65:14:84:a5:1d:0c:00:86:
51:07:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:26 2024 by rpki-client on console-ams.rpki-client.org